213.152.187.220 Threat Intelligence and Host Information

Jun 01, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 213.152.187.220 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 42/100

Host and Network Information

  • Tags: agent tesla, android, asyncrat, auto-generated security, c2, cisa, cvss, cvss base, cyber security, dark, domains, germany, ioc, linux kernel, malicious, mandrake, mozi, mozi link, Nextray, phishing, portscan, python, ransomware, rats, remcos, russia, service, ukraine, vidar, week

  • View other sources: Spamhaus VirusTotal

  • Contained within other IP sets: blocklist_net_ua, greensnow

  • Country: Netherlands
  • Network:
  • Noticed: 50 times
  • Protocols Attacked: spam
  • Countries Attacked: Canada, Czechia, Denmark, Estonia, France, Germany, Latvia, Lithuania, Norway, Poland, Romania, Sweden, Turkey, Ukraine, United Kingdom of Great Britain and Northern Ireland, United States of America
  • Passive DNS Results: tvr4ever.direct.quickconnect.to elzy.ddns.net ccss-94.direct.quickconnect.to servicepoint.duckdns.org 4life.longmusic.com storage.nsupdate.info timmy06.ddns.net planstr.diskstation.me kanyehub.com pvstub.ddns.net mandrilla.duckdns.org kagou.myqnapcloud.com timairvpn.ddns.net roxy.dynalias.net roxy.is-by.us racinn.duckdns.org

Malware Detected on Host

Count: 2 a04fb83c96c2c0f20e4fe73ffdefa166f0daec6cd885f8d396571a5fba7c0f4e b3bc07cd0967f3d44ec4152f26bf2b0df8c6016c8dd21ae39e97dff28961d40c

Open Ports Detected

88

Map

Links to attack logs

forum-spam-ip-list-2021-03-25 ****** forum-spam-ip-list-2021-03-16 forum-spam-ip-list-2021-03-17 ****** forum-spam-ip-list-2021-03-28 ******

Share on: